fix: strict config file permissions

Gabriel-Ladzaretti · Gabriel-Ladzaretti · commit 13426b376712 · 2025-10-10T19:49:33.000+03:00
diff --git a/config.go b/config.go
@@ -115,8 +115,8 @@ func parseFileConfig(path string) (*Config, error) {
 		return nil, fmt.Errorf("config: stat file: %w", err)
 	}
 
-	if (fi.Mode().Perm() & 0o022) != 0 {
-		logger.Warn("config file is writable by others", "path", path)
+	if fi.Mode().Perm() != 0o600 {
+		return nil, fmt.Errorf("config: %q has invalid permissions: got %04o, expected 0600", path, fi.Mode().Perm())
 	}
 
 	raw, err := os.ReadFile(filepath.Clean(path))

Original file line number	Diff line number	Diff line change
`@@ -115,8 +115,8 @@ func parseFileConfig(path string) (*Config, error) {`
`115`	`115`	`return nil, fmt.Errorf("config: stat file: %w", err)`
`116`	`116`	`}`
`117`	`117`
`118`		`- if (fi.Mode().Perm() & 0o022) != 0 {`
`119`		`- logger.Warn("config file is writable by others", "path", path)`
	`118`	`+ if fi.Mode().Perm() != 0o600 {`
	`119`	`+ return nil, fmt.Errorf("config: %q has invalid permissions: got %04o, expected 0600", path, fi.Mode().Perm())`
`120`	`120`	`}`
`121`	`121`
`122`	`122`	`raw, err := os.ReadFile(filepath.Clean(path))`